Static task
static1
Behavioral task
behavioral1
Sample
0aecc15f20968be0faa1328ae21dde098edac5993b627fb00c419eebd1697542.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0aecc15f20968be0faa1328ae21dde098edac5993b627fb00c419eebd1697542.exe
Resource
win10v2004-20230220-en
General
-
Target
e343faf5fe885af866a45e8922e3e012.bin
-
Size
644KB
-
MD5
9d4eb061ca02f5a8db8301527823aab9
-
SHA1
4d308f7e7f5dbc8c4ff6467b6bc0a1eacf9b0981
-
SHA256
4a6443437673f93af549a49b010ec53ed86c398bbfdd26923576dd132ebb0376
-
SHA512
c50b1e80c731391be44d9f46d8077859bf5f5a1af5385db27a2f30b09794879a1d5a7925fcd131ce2d3b66be5cc4de700ad1a7fd3bf7bed478b74e569ef53931
-
SSDEEP
12288:WgK+/ZJgJlEuUmZDO3lY7SffN6Xkau2twMi/d0De5YsZ:WgfZJgJu9Qihf160ad5Ad0De/Z
Malware Config
Signatures
Files
-
e343faf5fe885af866a45e8922e3e012.bin.zip
Password: infected
-
0aecc15f20968be0faa1328ae21dde098edac5993b627fb00c419eebd1697542.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 710KB - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ